$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e8f36dd-173a-3309-84c2-d15f5a5e54b0.roa File: 8e8f36dd-173a-3309-84c2-d15f5a5e54b0.roa (raw, json) Hash identifier: SiI7uUB5JUvizt8zx2nh1mQeupH12KxO2rsO7o/xtJE= Subject key identifier: 92:D3:D8:53:85:66:CD:83:64:93:FB:A6:CE:FB:28:99:DF:95:70:8B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB653E3722E9013F0D495000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e8f36dd-173a-3309-84c2-d15f5a5e54b0.roa Signing time: Wed 20 Aug 2025 13:19:43 +0000 ROA not before: Wed 20 Aug 2025 13:19:43 +0000 ROA not after: Tue 18 Nov 2025 14:19:43 +0000 asID: 31898 IP address blocks: 167.126.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:65:3e:37:22:e9:01:3f:0d:49:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 13:19:43 2025 GMT Not After : Nov 18 14:19:43 2025 GMT Subject: CN=d5df5a27-e22e-4ecb-a375-1e83c5e1a011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:79:2d:02:b8:9c:81:32:7a:ba:20:b8:7f:d7: 33:f9:b4:08:e6:a5:e3:d0:c8:b7:6d:94:38:6c:61: 57:7f:1b:ac:93:db:c3:09:0f:d2:69:60:a7:d1:55: 4c:5b:d4:e5:f3:f5:69:8e:b4:69:2b:7a:e5:7a:0b: ab:f4:d2:0c:74:af:18:3d:63:4e:a1:35:ba:61:05: c8:2b:e3:be:e6:fb:3e:72:e4:dd:04:ed:44:e2:ff: da:dd:8f:76:0d:9b:c5:b4:c2:78:b4:b2:cb:42:ee: 7b:97:12:4a:72:83:ef:2d:13:ec:45:8d:78:1b:70: d7:51:ef:96:10:50:27:60:0b:8a:13:55:ca:1b:3c: 77:76:32:0b:39:b0:01:33:41:45:55:46:4f:4f:10: 47:fa:16:f8:99:f2:d2:4e:b9:21:f5:ec:9a:aa:a5: 30:b1:5b:b5:be:35:bb:e4:d7:3c:a3:35:79:04:cb: d8:18:cb:d9:4e:e5:89:98:fb:fe:16:8f:4f:f8:da: 54:18:74:4e:fa:c6:26:7c:33:ae:df:a5:56:5a:c6: b9:f1:e8:d6:8e:5b:5e:25:aa:e6:8f:7c:52:46:86: cb:a6:5a:a5:c4:30:ea:db:3c:be:17:d0:40:a8:60: fb:e5:e3:43:80:03:63:ff:3e:c3:85:ef:56:e2:16: 0c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D3:D8:53:85:66:CD:83:64:93:FB:A6:CE:FB:28:99:DF:95:70:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e8f36dd-173a-3309-84c2-d15f5a5e54b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 167.126.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a8:f5:42:2c:24:85:49:4d:32:cd:ed:82:b2:7a:fc:e7:52: ff:cb:f1:76:7b:64:2f:f2:aa:15:e8:b2:d6:cf:95:c1:99:d1: 83:ab:34:8f:56:1f:88:6f:a8:9b:d6:53:86:2e:ee:c7:1b:b9: 1d:de:44:8c:97:bb:42:8c:de:ce:2b:40:ec:0c:eb:20:fe:92: 15:85:12:a8:35:0f:4a:dd:0b:44:40:58:fc:b4:ef:2e:2f:4f: 64:f8:43:51:e7:94:1a:f2:f2:ad:fa:ed:0a:a2:55:db:32:5a: 6d:73:22:f1:98:75:b4:5c:07:aa:65:57:d9:34:57:8d:2f:7c: 54:ef:f8:cf:45:a8:99:ff:34:2f:73:12:95:7e:bf:da:79:68: b1:bd:bf:de:36:4c:f3:f8:3a:09:dd:88:ac:c3:5c:d8:74:89: e5:99:da:47:53:5c:20:cd:c2:f4:dc:d2:6e:ee:30:60:6e:c1: 33:d4:d2:fb:e8:17:28:cd:e4:5c:c1:f5:91:d8:8c:c3:ff:92: ea:ac:0e:a7:d7:91:60:86:4e:ad:f8:b2:21:9a:fe:d1:34:5c: 10:34:c0:7b:7c:c2:e6:2e:14:4e:09:79:48:17:14:e6:0b:2e: 8a:93:a0:c2:a2:7c:26:6e:6c:7a:3f:a5:1f:8a:c5:c4:c1:4b: 4e:11:a2:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrZT43IukBPw1JUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEzMTk0M1oXDTI1MTExODE0MTk0M1owLzEtMCsGA1UEAxMk ZDVkZjVhMjctZTIyZS00ZWNiLWEzNzUtMWU4M2M1ZTFhMDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHktAricgTJ6uiC4f9cz+bQI5qXj0Mi3bZQ4 bGFXfxusk9vDCQ/SaWCn0VVMW9Tl8/VpjrRpK3rlegur9NIMdK8YPWNOoTW6YQXI K+O+5vs+cuTdBO1E4v/a3Y92DZvFtMJ4tLLLQu57lxJKcoPvLRPsRY14G3DXUe+W EFAnYAuKE1XKGzx3djILObABM0FFVUZPTxBH+hb4mfLSTrkh9eyaqqUwsVu1vjW7 5Nc8ozV5BMvYGMvZTuWJmPv+Fo9P+NpUGHRO+sYmfDOu36VWWsa58ejWjlteJarm j3xSRobLplqlxDDq2zy+F9BAqGD75eNDgANj/z7Dhe9W4hYMoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLT2FOFZs2DZJP7ps77KJnflXCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGU4ZjM2ZGQtMTczYS0z MzA5LTg0YzItZDE1ZjVhNWU1NGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFp34AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOo9UIsJIVJTTLN7YKyevznUv/L8XZ7ZC/yqhXostbPlcGZ0YOrNI9W H4hvqJvWU4Yu7scbuR3eRIyXu0KM3s4rQOwM6yD+khWFEqg1D0rdC0RAWPy07y4v T2T4Q1HnlBry8q367QqiVdsyWm1zIvGYdbRcB6plV9k0V40vfFTv+M9FqJn/NC9z EpV+v9p5aLG9v942TPP4OgndiKzDXNh0ieWZ2kdTXCDNwvTc0m7uMGBuwTPU0vvo FyjN5FzB9ZHYjMP/kuqsDqfXkWCGTq34siGa/tE0XBA0wHt8wuYuFE4JeUgXFOYL LoqToMKifCZubHo/pR+KxcTBS04RomU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:50 2025 by rpki-client